CyberArk Secrets Manager
CyberArk Secrets Manager: A broad secrets platform for hybrid environments, with strong lifecycle and workload identity controls. Ranked #6 of 44 in Secrets Management Tools by our editors (8.9/10); pricing: Pricing on request; best for enterprise hybrid privileged-secret management.
At a glance
- Editor score8.9 / 10
- PricingPricing on request
- Best forEnterprise hybrid privileged-secret management
- Secret rotationYes
- Founded2005 · Santa Clara, California, United States
- Facts checked22 Sep 2026
Where it wins
- Covers API keys, tokens, passwords, certificates, and database credentials
- Supports rotation, expiration, retirement, and short-lived workload identities
- Offers SaaS or self-hosted deployment with Kubernetes and CI/CD integrations
Where it doesn't
- Pricing requires a contact-sales process
- The broad enterprise feature set may exceed simpler team needs
- Self-hosted deployment adds operational responsibility
Our verdict on CyberArk Secrets Manager
CyberArk Secrets Manager is designed for organizations securing application credentials and other sensitive secrets across cloud, on-premises, hybrid, and multicloud environments. It centralizes storage and retrieval for API keys, tokens, passwords, certificates, and database credentials, while supporting applications, containers, DevOps workflows, and CI/CD pipelines. Its audience is enterprise security, platform, and infrastructure teams that need policy controls across varied environments rather than a narrowly focused password vault.
The product’s strongest area is lifecycle and access control. Policy-based rotation, expiration, and retirement help manage secrets beyond initial storage, while role-based access control covers applications and containers. Short-lived workload identities and on-demand secret retrieval add an identity-oriented approach for workloads. Tamper-resistant audit records capture key events, and Kubernetes authentication and secret injection integrations support containerized environments. Integrations include Kubernetes, Jenkins, Ansible, Terraform, and Cloud Foundry, alongside broader connections for public cloud platforms, PaaS, automation tools, and CI/CD toolchains.
Deployment flexibility is a central fit consideration. CyberArk offers managed SaaS and self-hosted forms, including support for organizations with data-residency or air-gapped deployment requirements. That breadth suits hybrid environments and teams that need control over where secrets are managed, but self-hosting brings additional operational responsibility. Pricing follows a contact-sales model, so the buying process is oriented toward organizations evaluating an enterprise deployment rather than selecting a transparent, self-serve plan. Choose CyberArk Secrets Manager when broad secret coverage, rotation, workload identity, auditability, and deployment choice matter together. A simpler tool may be a better match for teams seeking a smaller scope or direct plan-based purchasing.
Your product? Our editors can test CyberArk Secrets Manager in depth and publish a review, labelled as paid · from $149/mo →
CyberArk Secrets Manager pricing
CyberArk Secrets Manager fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Secret rotation | Yes |
| Dynamic secrets | Not verified |
| CI/CD injection | Yes |
| Kubernetes integration | Not verified |
| Deployment model | Both |
| Audit logs | Yes |
| Free secret limit | Not verified |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Support | Docs |
| Built for | Enterprise (editorial estimate) |
| Integrations | 5 integrations: CI/CD pipelines, cloud platforms, container platforms, DevOps tools, applications |
| Pricing | Pricing on request |
| Website | paloaltonetworks.com |
| Facts checked | 22 Sep 2026 |
CyberArk Secrets Manager integrations
CyberArk Secrets Manager lists 5 integrations on its own site.
- CI/CD pipelines
- cloud platforms
- container platforms
- DevOps tools
- applications
Alternatives to CyberArk Secrets Manager
- AkeylessA broad hybrid secrets platform with a capable free tier and enterprise controls.9.4
- InfisicalA broad secrets platform with a free tier, dynamic credentials, rotation, and Kubernetes support.9.3
- PhaseA feature-rich secrets platform with free access and clear paid tiers.9.2
See all CyberArk Secrets Manager alternatives →
CyberArk Secrets Manager vs the competition
- CyberArk Secrets Manager vs Akeyless
- CyberArk Secrets Manager vs Infisical
- CyberArk Secrets Manager vs Phase
- CyberArk Secrets Manager vs Doppler
- CyberArk Secrets Manager vs HashiCorp Vault
- CyberArk Secrets Manager vs Delinea DevOps Secrets Vault
Compare CyberArk Secrets Manager with any tool side by side →
Used CyberArk Secrets Manager? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used CyberArk Secrets Manager for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
CyberArk Secrets Manager is listed in our Secrets Management Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/cyberark-secrets-manager/"><img src="https://www.itechguides.com/best/badge/cyberark-secrets-manager.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update